A security risk management approach for e-commerce

E-commerce security is a complex issue; it is concerned with a number of security risks that can appear at either a technical level or organisational level. This paper uses a systemic framework, the viable system model (VSM) to determine the high level security risks and then uses baseline security methods to determine the lower level security risks.

The conceptualisation of operational risk management models

Operational risk is evolving as a specialist field of risk management that must be practiced within all organisations, but currently has a particular relevance to banks. The Basel Committee on Banking Supervision has circulated a consultative paper which, if adopted by nation-state bank supervisors, will impose an operational risk capital charge on banks as part of a new Capital Accord. The definition of operational risk is wide-ranging and creates some unique issues related to the development of appropriate risk management models. This paper conceptualises two distinct operational risk management models; being a predictive model that will result in a known outcome upon its implementation, and a pre-emptive operational risk management model which prepares an organisation in the event that a future risk occurrence results in a disruption to critical business operations.

Towards an organisational disaster risk management culture and practice for banks

The disaster risk management culture and practice that is evident within banks will significantly impact upon the capability and preparedness of institutions and their personnel to plan for, and respond to, an occurrence that may affect the continuity of critical business functions. The principal outcome of this paper is the development of a structured education and training framework that will support the achievement of banks' disaster risk management objective. The education and training framework comprises three specific programs: 1. an induction/awareness program targeted to all personnel; 2. a contingency planning program - a specialist program for disaster risk management personnel; and 3. an executive program designed for senior management, directors and strategic decision makers.

An education and training framework for disaster risk management in banks

Banks are the most significant financial institutions operating within nation-state and the global financial system. These institutions are exposed to a wide range of operational risks. Disaster risk management is a critical component of the wider operational risk management. The Bank for International Settlements, in conjunction with nation-state prudential regulators, is introducing measures that will require banks to identify, measure and manage operational risks within the context of new capital adequacy requirements. An essential part of any risk management process is education and training. This paper presents a structured education and training framework that will support the achievement of banks’ disaster risk management objectives. The education and training framework comprises three specific programs: (1) an induction/awareness program targeted to all personnel, (2) a contingency planning program – a specialist program for disaster risk management personnel, and (3) an executive program designed for senior management, directors and strategic decision makers.

Talent identification and risk management at AFL clubs : 'We'll only recruit public school boys in the future'

This paper will report on a research project funded by the Australian Football League (AFL).The research mobilises Foucault's later work on the care of the Self to focus on the ways in which player identities are regulated; and the manner in which players conduct themselves in ways that can be characterised as professional - or not.

The paper explores the forms of risk management that Clubs use in the processes of talent identification that they engage in as a consequence of AFL rules. The paper discusses how psychological profiling is used to identify character traits prior to initial recruitment in the draft or trading processes - and reports on suggestions that risk management in this increasingly commerciaIised context may lead to recruitment practices that exclude certain types of persons. from
certain types of backgrounds.

The conceptualisation of operational risk management models

Operational risk is evolving as a specialist field of risk management that must be practiced within all organisations, but currently has a particular relevance to banks. The Basel Committee on Banking Supervision has circulated a consultative paper which, if adopted by nation-state bank supervisors, will impose an operational risk capital charge on banks as part of a new Capital Accord. The definition of operational risk is wide-ranging and creates some unique issues related to the development of appropriate risk management models. This paper conceptualises two distinct operational risk management models; being a predictive model that will result in a known outcome upon its implementation, and a pre-emptive operational risk management model which prepares an organisation in the event that a future risk occurrence results in a disruption to critical business operations.

Clinical risk management and the ethics of open disclosure : part 1 : benefits and risks to patient safety

Patient safety experts and other authorities have strongly postulated the open disclosure of errors and adverse events to patients as an essential component of effective clinical risk management in health care. Commentators also contend that ‘when things go wrong’, openly disclosing such events to the patient and his or her nominated support person is simply ‘the right thing to do’. Despite the obvious importance of the issue of open disclosure and its possible implications for the nursing profession, it has not been comprehensively addressed in the nursing literature. A key aim of this article (the first of a two-part discussion) is to contribute to the positive project of redressing this oversight by providing a brief overview of what open disclosure is and what its intended purpose, aims, and rationale are. Consideration is also given to the risks and benefits of open disclosure as a public policy and whether it will succeed in achieving the anticipated outcomes envisaged. In a second article (to be presented as Part II), the ethics of open disclosure and its possible implications for the nursing profession are explored.

Risk management and ethical environment : effects on internal audit and accounting control procedures

This study examines the impact of the scope of risk management and ethical environment on internal audit activities and the quality of accounting control procedures (ACPQ). The conceptual framework for the study is guided by COSO’s frameworks on internal controls and enterprise risk management and data from a questionnaire survey of 64 Australian firms are analysed using a structural equation model. The results of the study support that (1) internal audit activities have a significant intervening effect on the relationship between the scope of risk management and ACPQ, and (2) a direct and positive relationship exists between ethical environment and ACPQ. Our findings suggest that widening the scope of risk management activities do not directly improve ACPQ, but that it leads to more extensive internal audit activities and in turn such activities promote better ACPQ. Further, the results indicate that fostering a more ethical environment directly leads to higher ACPQ. These results have implications for the design of internal controls, namely with respect to the role of internal audit activities and ethical environment in enhancing ACPQ.

Gambling and corporate social responsibility (CSR) : re-defining industry and state roles on duty of care, host responsibility and risk management

During the 1990s, states embraced legalised gambling as a means of supplementing state revenue. But gaming machines (EGMs, pokies, VLTs, Slots) have become increasingly controversial in countries such as Australia, Canada and New Zealand, which experienced unprecedented roll-out of gaming machines in casino and community settings; alongside revenue windfalls for both governments and the gambling industry. Governments have recognised that gambling results in a range of social and economic harms and, similar to tobacco and alcohol, have introduced public policies predicated on harm minimisation. Yet despite these, gaming losses have continued to climb in most jurisdictions, along with concerns about gambling-related harms. The first part of this article discusses an emerging debate in Ontario Canada, that draws parallels between host responsibility in alcohol and gambling venues. In Canada, where government owns and operates the gaming industry, this debate prompts important questions on the role of the state, duty of care and regulation ‘in the public interest’ and on CSR, host responsibility and consumer protection. This prompts the question: Do governments owe a duty of care to gamblers?

The article then discusses three domains of accumulating research evidence to inform questions raised in the Ontario debate: evidence that visible behavioural indicators can be used with high confidence to identify problem gamblers on-site in venues as they gamble; new systems using player tracking and loyalty data that can provide management with high precision identification of problem gamblers and associated risk (for protective interventions); and research on technological design features of new generation gaming products in interaction with players, that shows how EGM machines can be the site for monitoring/protecting players. We then canvass some leading international jurisdictions on gambling policy CSR and consumer protection.

In light of this new research, we ask whether the risk of legal liability poses a tipping point for more interventionist public policy responses by both the state and industry. This includes a proactive role for the state in re-regulating the gambling industry/products; instituting new forms of gaming machine product control/protection; and reinforcing corporate social responsibility (CSR) and host responsibility obligations on gambling providers – beyond self-regulatory codes. We argue the ground is shifting, there is new evidence to inform public policy and government regulation and there are new pressures on gambling providers and regulators to avail themselves of the new technology – or risk litigation